CVE-2020-15778

High

Advisory

Published 24 Jul 2020In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.4; base score, highest
EPSS: 0.130; 96th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 258; of 17,781 indexed, latest versions
Container images: 255; deployed by those charts
Fix available: 1 of 2; affected packages

Red Hat Security Advisory: openssh security update

Carried by container images the latest versions of 258 of 17,781 indexed charts deploy, on 255 images.

Affected package	Affected versions	Fixed in	Images
opensshdeb	1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+29 more	no fix listed	246
opensshrpm	8.0p1-4.el8_1, 8.0p1-6.el8_4.2, 8.0p1-9.el8, 8.0p1-15.el8_6.3+1 more	0:8.0p1-24.el8	9

OSV records: DEBIAN-CVE-2020-15778 UBUNTU-CVE-2020-15778 RHSA-2024:3166

Charts affected

258 by stars

Chart

Latest

Affected images

Radar Score

codegentest-opea

1.0.0

1 of 5 See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
opea/codegen-ui :1.0	2bee4eb66f3e	openssh@1:9.2p1-2+deb12u2	no fix listed

Open the chart page →

28,814

codetranstest-opea

1.0.0

1 of 5 See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
opea/codetrans-ui :1.0	3ef121f34610	openssh@1:9.2p1-2+deb12u2	no fix listed

Open the chart page →

28,385

docsumtest-opea

1.0.0

1 of 5 See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
opea/docsum-ui :1.0	7f854e9bffaf	openssh@1:9.2p1-2+deb12u2	no fix listed

Open the chart page →

28,858

jenkinstnh

2.7.1

1 of 2 See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	openssh@1:10.0p1-7+deb13u4	no fix listed

Open the chart page →

4,423

tfy-distributortruefoundry

0.0.1

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	openssh@1:9.2p1-2+deb12u2	no fix listed

Open the chart page →

17,323

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	openssh@1:9.2p1-2	no fix listed

Open the chart page →

14,358

jenkinswebencryptor

1.9.18

1 of 1 See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	openssh@1:10.0p1-7+deb13u4	no fix listed

Open the chart page →

2,476

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	openssh@1:9.2p1-2+deb12u2	no fix listed

Open the chart page →

5,542

Container images carrying it

255 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	openssh@8.0p1-9.el8	0:8.0p1-24.el8	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	openssh@1:9.2p1-2	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	openssh@1:9.2p1-2+deb12u10	no fix listed	1
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	openssh@1:10.0p1-7	no fix listed	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	openssh@1:9.2p1-2+deb12u1	no fix listed	1